Fixed bugs with install script
This commit is contained in:
@@ -29,7 +29,7 @@ ProtectControlGroups=true
|
|||||||
RestrictRealtime=true
|
RestrictRealtime=true
|
||||||
RestrictSUIDSGID=true
|
RestrictSUIDSGID=true
|
||||||
LockPersonality=true
|
LockPersonality=true
|
||||||
MemoryDenyWriteExecute=true
|
# MemoryDenyWriteExecute=true # Disabled - conflicts with Node.js JIT compilation
|
||||||
RestrictNamespaces=true
|
RestrictNamespaces=true
|
||||||
SystemCallFilter=@system-service
|
SystemCallFilter=@system-service
|
||||||
SystemCallErrorNumber=EPERM
|
SystemCallErrorNumber=EPERM
|
||||||
|
|||||||
Reference in New Issue
Block a user